Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File:                     _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier:          Kv7ul67L/Igz2UWETl/lWw2vCvnmXIueqHZe7gEolxk=
Subject key identifier:   7C:22:A8:AE:2F:76:4F:AF:D1:BD:F6:8B:6E:55:F8:2B:B8:E6:A1:0A
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer:       /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial:       01962F3DD926497D793BDE72DD28A7530E1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
                          2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: 6sHEkuQWOYl9b6xAiPcf26egurJEe12Qv7JxxgUzw4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d9:26:49:7d:79:3b:de:72:dd:28:a7:53:0e:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=7c22a8ae2f764fafd1bdf68b6e55f82bb8e6a10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3e:d1:c2:23:b7:3d:f9:c2:90:fa:24:81:cb:
                    80:20:d4:4f:92:21:92:9f:e0:37:d7:ce:5b:2c:56:
                    b5:b5:5e:16:0b:2c:d9:23:a3:13:b9:1a:c4:73:11:
                    7b:5c:4e:f4:b0:e4:89:35:5e:f0:7f:8c:8e:51:7a:
                    41:15:8a:77:77:a3:cc:d9:2c:ea:8b:1e:64:e1:e3:
                    50:42:36:53:2a:b3:c2:90:88:87:77:f8:bc:7d:3a:
                    ef:36:6f:a4:b0:e8:58:46:9d:91:ec:01:53:c9:65:
                    12:8a:48:93:f2:a3:77:8b:f6:16:3a:e7:13:80:1f:
                    67:5e:64:83:71:d1:8b:d8:e0:0f:8f:bb:ef:5a:59:
                    b9:1e:08:25:ef:2a:6b:27:60:70:20:03:54:d9:10:
                    21:e1:83:9c:91:da:26:09:b2:35:01:a8:54:e6:45:
                    3b:ff:82:f8:39:ed:9d:ab:93:a4:6c:06:24:87:fe:
                    37:a0:0c:25:74:69:3a:b2:aa:30:9c:3c:c0:c9:b9:
                    4b:9f:d5:80:96:1b:81:0f:a4:af:f0:46:ce:4f:e7:
                    ae:84:17:2a:00:9c:98:94:9e:db:60:4f:31:71:b2:
                    66:43:7f:e0:82:24:3d:94:94:2b:02:07:3d:9f:3d:
                    5d:f2:2d:79:21:fc:d7:dd:15:3f:db:df:31:e6:24:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:A8:AE:2F:76:4F:AF:D1:BD:F6:8B:6E:55:F8:2B:B8:E6:A1:0A
            X509v3 Authority Key Identifier:
                keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:c9:21:80:6d:c1:2c:71:e7:72:f3:cc:25:9f:92:89:96:
         fe:6f:a5:a1:67:ba:aa:ff:ca:28:f5:2d:b4:82:2c:2d:05:52:
         f8:24:d5:cd:07:7a:9a:b0:02:89:c5:6d:c9:1a:66:11:a7:a1:
         53:3c:85:52:8a:45:71:85:fb:25:96:e5:a2:80:89:37:88:ee:
         9d:09:2a:1b:90:2d:3e:de:25:59:16:ad:73:63:83:c4:49:e8:
         99:e9:6c:93:92:a7:5d:03:65:f6:26:6f:6f:a3:a4:06:37:9b:
         20:e1:03:fe:b3:3d:23:55:b1:9b:36:e9:20:50:d4:9a:26:b2:
         2c:35:2d:c6:f9:75:f2:89:51:ce:82:45:fe:98:da:4a:38:75:
         fd:26:65:0f:f3:30:50:70:02:b9:0f:fa:30:67:79:74:61:8a:
         bc:88:7a:a7:bb:31:f3:57:36:96:ff:33:b0:35:66:02:08:58:
         32:91:a4:4b:6f:25:61:bc:62:1a:31:a1:c6:f2:60:97:98:84:
         db:d6:75:bf:93:39:85:be:0a:55:09:cf:19:33:2b:bb:b7:f0:
         b4:87:c4:dd:7f:40:92:0e:2a:2d:f2:67:f2:13:9e:d0:ee:e0:
         d0:67:de:49:07:4b:14:a8:78:60:5b:75:8e:0e:47:e9:18:7f:
         ac:90:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----